Forum Discussion
brad_scherer_11
Nimbostratus
Apr 09, 2009Load Balance to an SSL Proxy Server
Hello,
I have an interesting problem/solution here.
We run ISA server proxies that are in a pool behind the BigIP. The BigIP hosts the VIP on port 8080.
We want to impleme...
brad_scherer_11
Nimbostratus
Apr 14, 2009Hi Denny. thanks for the reply.
I want to be able to look in to any traffic coming in on tcp port 8080 destined for the proxy servers and ultimately the Internet. If I see the connect string within that packet for any port that is potentially ssl (as determined by us) I want that traffic to be sent to a different pool.
I have 2 sets of proxies for Internet Access but only one VIP. All unencrypted traffic can go through the one set of proxies but any potential SSL traffic should go to the other set specifically deployed to inspect that traffic.
I want the rule on the port 8080 VIP to look for connect strings that use ports like 443, 9443, 6443 etc.
I hope I am being clear here. Please let me know if not and I will try to explain this better.
Right now if I look at a capture of port 8080 traffic I can see within those packets connect requests going to host:port. I want to make a decision based on those request port numbers. Would it be helpful to upload a cap of what I am looking at?
Thanks,
Brad
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
